Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8v43-6xfg-43pr

Опубликовано: 15 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

EPSS

Процентиль: 69%
0.0061
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

CVSS3: 9.8
fstec
около 2 лет назад

Уязвимость функции загрузки файлов системы маркетинговой рассылки OMICARD, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

EPSS

Процентиль: 69%
0.0061
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434